A vulnerability classified as problematic was found in Lectora Desktop and Online. This issue affects some unknown processing of the component Seamless Play Publish. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2025-9125. The attack can be executed remotely. There is not any exploit available.